Microsoft is working on mitigating an entire Windows bug class

guest · Apr 1, 2020

Microsoft is working on mitigating an entire Windows bug class
April 1, 2020
https://www.zdnet.com/article/microsoft-is-working-on-mitigating-an-entire-windows-bug-class/

Microsoft is working on developing comprehensive mitigation for a class of Windows bugs that have plagued the operating system for more than two decades.
Israeli security researcher Gil Dabah told ZDNet that a fix is currently in the works.
Earlier today, Dabah published proof-of-concept code and a report detailing 25 bugs, all exploiting variations on the same type of vulnerability.
BUG CLASS IMPACTS THE OLD WIN32K COMPONENT
Dabah's work expands on an attack surface in the Windows operating system that's been known since the mid-90s. The vulnerability class impacts Win32k, a Windows component that manages the user interface on Windows 32-bit architectures, and the interactions between UI elements, drivers, and the Windows OS/kernel.

These older Win32k functions are all prefixed with "xxx" [...] realized that they could tamper with Win32k's xxx-prefixed code while it was in user mode memory, and fool the kernel into executing unwanted actions with elevated privileges when the results of the xxx function were returned to the kernel.
Click to expand...

For more than a decade, security researchers have detailed numerous methods and techniques for inserting malicious code inside the Win32k component and get admin rights. Research on the topic goes as far back as 2008 and 2011.
In total, the researcher found 25 different bugs, some of which worked even on the latest versions of Windows 10 -- at the time of testing being Windows Insider Preview, September 2019.
Click to expand...

Dabah's report, which received praises from most of the information security community, is available for download in PDF format. Proof-of-concept code for 13 of the 25 bugs is available on GitHub.
Click to expand...

Log in or Sign up

Microsoft is working on mitigating an entire Windows bug class

guest Guest

Log in or Sign up

Microsoft is working on mitigating an entire Windows bug class

guest Guest

Useful Searches